Description
WordPress Plugin Download Plugin is prone to a vulnerability that lets attackers download arbitrary directories because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Download Plugin version 1.0.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.2 or latest
References
Related Vulnerabilities
WordPress Plugin Showbiz Pro Responsive Teaser Arbitrary File Upload (1.7.1)
Oracle JRE CVE-2013-2384 Vulnerability (CVE-2013-2384)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Multiple Vulnerabilities (4.1.2)
WordPress Plugin Events Manager Multiple Vulnerabilities (5.9.7.3)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5769)